---
apiVersion: source.toolkit.fluxcd.io/v1
kind: HelmRepository
metadata:
  name: authentik
  namespace: flux-system
spec:
  url: https://charts.goauthentik.io/
  interval: 1h
---
apiVersion: v1
kind: Secret
metadata:
  name: wildcard-hxme-net
  namespace: home-server
  annotations:
    replicator.v1.mittwald.de/replicate-from: cert-manager/wildcard-hxme-net
---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: authentik
  namespace: home-server
spec:
  interval: 30m
  chart:
    spec:
      chart: authentik
      version: 2024.4.2
      sourceRef:
        kind: HelmRepository
        name: authentik
        namespace: flux-system
  install:
    createNamespace: true
  upgrade:
    disableWait: false
  timeout: 10m
  valuesFrom:
    - kind: Secret
      name: authentik-values
  values:
    ingress:
      annotations:
        external-dns.alpha.kubernetes.io/hostname: auth.hxme.net
      tls:
        - secretName: wildcard-hxme-net
          hosts:
            - auth.hxme.net